Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-32752

Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls iSTAR Configuration Utility (ICU)

Default version status: affected

  • 0 to ≤ Allaffected

Johnson Controls iSTAR Pro, Edge and eX

Default version status: affected

  • 0 to ≤ Allaffected

Johnson Controls iSTAR Ultra and Ultra LT

Default version status: affected

  • 0 to < 6.6.Baffected

References